./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec4_product62.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version dbf71c69 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_604f0cdd-6c41-4b72-97ad-3ed819f0f7b2/bin/uautomizer-J5u9QxTXDZ/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_604f0cdd-6c41-4b72-97ad-3ed819f0f7b2/bin/uautomizer-J5u9QxTXDZ/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_604f0cdd-6c41-4b72-97ad-3ed819f0f7b2/bin/uautomizer-J5u9QxTXDZ/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_604f0cdd-6c41-4b72-97ad-3ed819f0f7b2/bin/uautomizer-J5u9QxTXDZ/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec4_product62.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_604f0cdd-6c41-4b72-97ad-3ed819f0f7b2/bin/uautomizer-J5u9QxTXDZ/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_604f0cdd-6c41-4b72-97ad-3ed819f0f7b2/bin/uautomizer-J5u9QxTXDZ --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 894b9126919d6af09c0902d1c20b8183acfd3589fe20590a119ca487cf6e7a3f --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-dbf71c6-m [2022-10-17 10:14:41,824 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-10-17 10:14:41,827 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-10-17 10:14:41,880 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-10-17 10:14:41,881 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-10-17 10:14:41,884 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-10-17 10:14:41,887 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-10-17 10:14:41,892 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-10-17 10:14:41,895 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-10-17 10:14:41,900 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-10-17 10:14:41,901 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-10-17 10:14:41,904 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-10-17 10:14:41,904 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-10-17 10:14:41,907 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-10-17 10:14:41,909 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-10-17 10:14:41,911 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-10-17 10:14:41,913 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-10-17 10:14:41,914 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-10-17 10:14:41,916 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-10-17 10:14:41,923 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-10-17 10:14:41,925 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-10-17 10:14:41,931 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-10-17 10:14:41,934 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-10-17 10:14:41,935 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-10-17 10:14:41,945 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-10-17 10:14:41,946 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-10-17 10:14:41,946 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-10-17 10:14:41,948 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-10-17 10:14:41,949 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-10-17 10:14:41,951 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-10-17 10:14:41,951 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-10-17 10:14:41,953 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-10-17 10:14:41,955 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-10-17 10:14:41,956 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-10-17 10:14:41,957 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-10-17 10:14:41,957 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-10-17 10:14:41,958 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-10-17 10:14:41,958 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-10-17 10:14:41,958 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-10-17 10:14:41,959 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-10-17 10:14:41,960 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-10-17 10:14:41,960 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_604f0cdd-6c41-4b72-97ad-3ed819f0f7b2/bin/uautomizer-J5u9QxTXDZ/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-10-17 10:14:41,999 INFO L113 SettingsManager]: Loading preferences was successful [2022-10-17 10:14:42,000 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-10-17 10:14:42,000 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-10-17 10:14:42,001 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-10-17 10:14:42,002 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-10-17 10:14:42,002 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-10-17 10:14:42,003 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-10-17 10:14:42,003 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-10-17 10:14:42,003 INFO L138 SettingsManager]: * Use SBE=true [2022-10-17 10:14:42,003 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-10-17 10:14:42,004 INFO L138 SettingsManager]: * sizeof long=4 [2022-10-17 10:14:42,004 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-10-17 10:14:42,005 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-10-17 10:14:42,005 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-10-17 10:14:42,005 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-10-17 10:14:42,005 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-10-17 10:14:42,005 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-10-17 10:14:42,006 INFO L138 SettingsManager]: * sizeof long double=12 [2022-10-17 10:14:42,006 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-10-17 10:14:42,006 INFO L138 SettingsManager]: * Use constant arrays=true [2022-10-17 10:14:42,006 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-10-17 10:14:42,006 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-10-17 10:14:42,007 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-10-17 10:14:42,007 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-10-17 10:14:42,007 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-10-17 10:14:42,007 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-10-17 10:14:42,009 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-10-17 10:14:42,009 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-10-17 10:14:42,009 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-10-17 10:14:42,009 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-10-17 10:14:42,010 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-10-17 10:14:42,010 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-10-17 10:14:42,010 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-10-17 10:14:42,010 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_604f0cdd-6c41-4b72-97ad-3ed819f0f7b2/bin/uautomizer-J5u9QxTXDZ/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_604f0cdd-6c41-4b72-97ad-3ed819f0f7b2/bin/uautomizer-J5u9QxTXDZ Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 894b9126919d6af09c0902d1c20b8183acfd3589fe20590a119ca487cf6e7a3f [2022-10-17 10:14:42,247 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-10-17 10:14:42,270 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-10-17 10:14:42,272 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-10-17 10:14:42,274 INFO L271 PluginConnector]: Initializing CDTParser... [2022-10-17 10:14:42,275 INFO L275 PluginConnector]: CDTParser initialized [2022-10-17 10:14:42,276 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_604f0cdd-6c41-4b72-97ad-3ed819f0f7b2/bin/uautomizer-J5u9QxTXDZ/../../sv-benchmarks/c/product-lines/minepump_spec4_product62.cil.c [2022-10-17 10:14:42,337 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_604f0cdd-6c41-4b72-97ad-3ed819f0f7b2/bin/uautomizer-J5u9QxTXDZ/data/bc0c4c9b0/f11ec62af92e40c39ff713fd820a4241/FLAGeb61ade77 [2022-10-17 10:14:42,853 INFO L306 CDTParser]: Found 1 translation units. [2022-10-17 10:14:42,854 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_604f0cdd-6c41-4b72-97ad-3ed819f0f7b2/sv-benchmarks/c/product-lines/minepump_spec4_product62.cil.c [2022-10-17 10:14:42,870 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_604f0cdd-6c41-4b72-97ad-3ed819f0f7b2/bin/uautomizer-J5u9QxTXDZ/data/bc0c4c9b0/f11ec62af92e40c39ff713fd820a4241/FLAGeb61ade77 [2022-10-17 10:14:43,169 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_604f0cdd-6c41-4b72-97ad-3ed819f0f7b2/bin/uautomizer-J5u9QxTXDZ/data/bc0c4c9b0/f11ec62af92e40c39ff713fd820a4241 [2022-10-17 10:14:43,172 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-10-17 10:14:43,176 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-10-17 10:14:43,183 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-10-17 10:14:43,183 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-10-17 10:14:43,186 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-10-17 10:14:43,186 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.10 10:14:43" (1/1) ... [2022-10-17 10:14:43,187 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@d472291 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:14:43, skipping insertion in model container [2022-10-17 10:14:43,187 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.10 10:14:43" (1/1) ... [2022-10-17 10:14:43,197 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-10-17 10:14:43,244 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-10-17 10:14:43,440 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_604f0cdd-6c41-4b72-97ad-3ed819f0f7b2/sv-benchmarks/c/product-lines/minepump_spec4_product62.cil.c[1605,1618] [2022-10-17 10:14:43,556 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-10-17 10:14:43,564 INFO L203 MainTranslator]: Completed pre-run [2022-10-17 10:14:43,577 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_604f0cdd-6c41-4b72-97ad-3ed819f0f7b2/sv-benchmarks/c/product-lines/minepump_spec4_product62.cil.c[1605,1618] [2022-10-17 10:14:43,632 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-10-17 10:14:43,651 INFO L208 MainTranslator]: Completed translation [2022-10-17 10:14:43,651 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:14:43 WrapperNode [2022-10-17 10:14:43,651 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-10-17 10:14:43,653 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-10-17 10:14:43,653 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-10-17 10:14:43,653 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-10-17 10:14:43,660 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:14:43" (1/1) ... [2022-10-17 10:14:43,676 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:14:43" (1/1) ... [2022-10-17 10:14:43,708 INFO L138 Inliner]: procedures = 58, calls = 161, calls flagged for inlining = 25, calls inlined = 22, statements flattened = 292 [2022-10-17 10:14:43,709 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-10-17 10:14:43,710 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-10-17 10:14:43,710 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-10-17 10:14:43,710 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-10-17 10:14:43,719 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:14:43" (1/1) ... [2022-10-17 10:14:43,719 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:14:43" (1/1) ... [2022-10-17 10:14:43,722 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:14:43" (1/1) ... [2022-10-17 10:14:43,723 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:14:43" (1/1) ... [2022-10-17 10:14:43,729 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:14:43" (1/1) ... [2022-10-17 10:14:43,734 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:14:43" (1/1) ... [2022-10-17 10:14:43,736 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:14:43" (1/1) ... [2022-10-17 10:14:43,738 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:14:43" (1/1) ... [2022-10-17 10:14:43,742 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-10-17 10:14:43,743 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-10-17 10:14:43,743 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-10-17 10:14:43,743 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-10-17 10:14:43,762 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:14:43" (1/1) ... [2022-10-17 10:14:43,769 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-10-17 10:14:43,783 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_604f0cdd-6c41-4b72-97ad-3ed819f0f7b2/bin/uautomizer-J5u9QxTXDZ/z3 [2022-10-17 10:14:43,804 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_604f0cdd-6c41-4b72-97ad-3ed819f0f7b2/bin/uautomizer-J5u9QxTXDZ/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-10-17 10:14:43,834 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_604f0cdd-6c41-4b72-97ad-3ed819f0f7b2/bin/uautomizer-J5u9QxTXDZ/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-10-17 10:14:43,864 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-10-17 10:14:43,864 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-10-17 10:14:43,864 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-10-17 10:14:43,865 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-10-17 10:14:43,866 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-10-17 10:14:43,866 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-10-17 10:14:43,866 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-10-17 10:14:43,873 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-10-17 10:14:43,874 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-10-17 10:14:43,875 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-10-17 10:14:43,875 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-10-17 10:14:43,875 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2022-10-17 10:14:43,875 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2022-10-17 10:14:43,876 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2022-10-17 10:14:43,876 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2022-10-17 10:14:43,876 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-10-17 10:14:43,876 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-10-17 10:14:43,876 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-10-17 10:14:43,878 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-10-17 10:14:43,879 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-10-17 10:14:43,879 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-10-17 10:14:43,879 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-10-17 10:14:44,009 INFO L235 CfgBuilder]: Building ICFG [2022-10-17 10:14:44,012 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-10-17 10:14:44,437 INFO L276 CfgBuilder]: Performing block encoding [2022-10-17 10:14:44,447 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-10-17 10:14:44,447 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-10-17 10:14:44,450 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.10 10:14:44 BoogieIcfgContainer [2022-10-17 10:14:44,450 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-10-17 10:14:44,458 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-10-17 10:14:44,458 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-10-17 10:14:44,462 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-10-17 10:14:44,462 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 17.10 10:14:43" (1/3) ... [2022-10-17 10:14:44,463 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@f9c59c8 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.10 10:14:44, skipping insertion in model container [2022-10-17 10:14:44,464 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:14:43" (2/3) ... [2022-10-17 10:14:44,464 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@f9c59c8 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.10 10:14:44, skipping insertion in model container [2022-10-17 10:14:44,464 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.10 10:14:44" (3/3) ... [2022-10-17 10:14:44,466 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec4_product62.cil.c [2022-10-17 10:14:44,492 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-10-17 10:14:44,492 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-10-17 10:14:44,548 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-10-17 10:14:44,555 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@6886c79a, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-10-17 10:14:44,555 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-10-17 10:14:44,560 INFO L276 IsEmpty]: Start isEmpty. Operand has 104 states, 77 states have (on average 1.3766233766233766) internal successors, (106), 87 states have internal predecessors, (106), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2022-10-17 10:14:44,569 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2022-10-17 10:14:44,570 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:14:44,570 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:14:44,571 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:14:44,577 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:14:44,583 INFO L85 PathProgramCache]: Analyzing trace with hash 1971423540, now seen corresponding path program 1 times [2022-10-17 10:14:44,592 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:14:44,593 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1821026629] [2022-10-17 10:14:44,593 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:14:44,594 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:14:44,726 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:14:44,886 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:14:44,887 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:14:44,887 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1821026629] [2022-10-17 10:14:44,888 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1821026629] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:14:44,888 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:14:44,888 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-10-17 10:14:44,890 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1240905433] [2022-10-17 10:14:44,890 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:14:44,894 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-10-17 10:14:44,895 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:14:44,923 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-10-17 10:14:44,924 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-10-17 10:14:44,926 INFO L87 Difference]: Start difference. First operand has 104 states, 77 states have (on average 1.3766233766233766) internal successors, (106), 87 states have internal predecessors, (106), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) Second operand has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-10-17 10:14:44,966 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:14:44,967 INFO L93 Difference]: Finished difference Result 200 states and 271 transitions. [2022-10-17 10:14:44,968 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-10-17 10:14:44,969 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2022-10-17 10:14:44,969 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:14:44,979 INFO L225 Difference]: With dead ends: 200 [2022-10-17 10:14:44,980 INFO L226 Difference]: Without dead ends: 95 [2022-10-17 10:14:44,984 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-10-17 10:14:44,988 INFO L413 NwaCegarLoop]: 132 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 132 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-10-17 10:14:44,989 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 132 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-10-17 10:14:45,007 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 95 states. [2022-10-17 10:14:45,034 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 95 to 95. [2022-10-17 10:14:45,036 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 95 states, 70 states have (on average 1.3142857142857143) internal successors, (92), 79 states have internal predecessors, (92), 16 states have call successors, (16), 9 states have call predecessors, (16), 8 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2022-10-17 10:14:45,039 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 95 states to 95 states and 123 transitions. [2022-10-17 10:14:45,041 INFO L78 Accepts]: Start accepts. Automaton has 95 states and 123 transitions. Word has length 19 [2022-10-17 10:14:45,041 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:14:45,042 INFO L495 AbstractCegarLoop]: Abstraction has 95 states and 123 transitions. [2022-10-17 10:14:45,042 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-10-17 10:14:45,042 INFO L276 IsEmpty]: Start isEmpty. Operand 95 states and 123 transitions. [2022-10-17 10:14:45,044 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-10-17 10:14:45,045 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:14:45,045 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:14:45,045 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-10-17 10:14:45,045 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:14:45,046 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:14:45,046 INFO L85 PathProgramCache]: Analyzing trace with hash -856589602, now seen corresponding path program 1 times [2022-10-17 10:14:45,047 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:14:45,047 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [561654419] [2022-10-17 10:14:45,047 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:14:45,048 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:14:45,083 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:14:45,187 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:14:45,188 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:14:45,188 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [561654419] [2022-10-17 10:14:45,188 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [561654419] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:14:45,188 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:14:45,189 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-10-17 10:14:45,189 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1879532284] [2022-10-17 10:14:45,189 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:14:45,190 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-10-17 10:14:45,191 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:14:45,191 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-10-17 10:14:45,192 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-10-17 10:14:45,192 INFO L87 Difference]: Start difference. First operand 95 states and 123 transitions. Second operand has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-10-17 10:14:45,214 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:14:45,215 INFO L93 Difference]: Finished difference Result 155 states and 201 transitions. [2022-10-17 10:14:45,215 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-10-17 10:14:45,215 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2022-10-17 10:14:45,216 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:14:45,217 INFO L225 Difference]: With dead ends: 155 [2022-10-17 10:14:45,218 INFO L226 Difference]: Without dead ends: 86 [2022-10-17 10:14:45,219 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-10-17 10:14:45,221 INFO L413 NwaCegarLoop]: 110 mSDtfsCounter, 13 mSDsluCounter, 93 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 203 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-10-17 10:14:45,221 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [16 Valid, 203 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-10-17 10:14:45,223 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 86 states. [2022-10-17 10:14:45,232 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 86 to 86. [2022-10-17 10:14:45,233 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 86 states, 64 states have (on average 1.328125) internal successors, (85), 73 states have internal predecessors, (85), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) [2022-10-17 10:14:45,235 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 86 states to 86 states and 111 transitions. [2022-10-17 10:14:45,235 INFO L78 Accepts]: Start accepts. Automaton has 86 states and 111 transitions. Word has length 20 [2022-10-17 10:14:45,235 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:14:45,236 INFO L495 AbstractCegarLoop]: Abstraction has 86 states and 111 transitions. [2022-10-17 10:14:45,236 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-10-17 10:14:45,236 INFO L276 IsEmpty]: Start isEmpty. Operand 86 states and 111 transitions. [2022-10-17 10:14:45,237 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-10-17 10:14:45,237 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:14:45,238 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:14:45,238 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-10-17 10:14:45,238 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:14:45,239 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:14:45,239 INFO L85 PathProgramCache]: Analyzing trace with hash 2135542647, now seen corresponding path program 1 times [2022-10-17 10:14:45,239 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:14:45,239 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [612913410] [2022-10-17 10:14:45,239 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:14:45,240 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:14:45,267 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:14:45,414 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:14:45,414 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:14:45,415 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [612913410] [2022-10-17 10:14:45,415 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [612913410] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:14:45,415 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:14:45,417 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-10-17 10:14:45,417 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1829565536] [2022-10-17 10:14:45,417 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:14:45,418 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-10-17 10:14:45,418 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:14:45,419 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-10-17 10:14:45,419 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-10-17 10:14:45,420 INFO L87 Difference]: Start difference. First operand 86 states and 111 transitions. Second operand has 5 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-10-17 10:14:45,527 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:14:45,527 INFO L93 Difference]: Finished difference Result 165 states and 216 transitions. [2022-10-17 10:14:45,528 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-10-17 10:14:45,528 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 25 [2022-10-17 10:14:45,528 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:14:45,530 INFO L225 Difference]: With dead ends: 165 [2022-10-17 10:14:45,530 INFO L226 Difference]: Without dead ends: 86 [2022-10-17 10:14:45,531 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-10-17 10:14:45,533 INFO L413 NwaCegarLoop]: 104 mSDtfsCounter, 136 mSDsluCounter, 176 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 136 SdHoareTripleChecker+Valid, 280 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-10-17 10:14:45,534 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [136 Valid, 280 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-10-17 10:14:45,535 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 86 states. [2022-10-17 10:14:45,548 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 86 to 86. [2022-10-17 10:14:45,552 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 86 states, 64 states have (on average 1.3125) internal successors, (84), 73 states have internal predecessors, (84), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) [2022-10-17 10:14:45,554 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 86 states to 86 states and 110 transitions. [2022-10-17 10:14:45,556 INFO L78 Accepts]: Start accepts. Automaton has 86 states and 110 transitions. Word has length 25 [2022-10-17 10:14:45,557 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:14:45,557 INFO L495 AbstractCegarLoop]: Abstraction has 86 states and 110 transitions. [2022-10-17 10:14:45,557 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-10-17 10:14:45,558 INFO L276 IsEmpty]: Start isEmpty. Operand 86 states and 110 transitions. [2022-10-17 10:14:45,560 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-10-17 10:14:45,562 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:14:45,562 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:14:45,563 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-10-17 10:14:45,563 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:14:45,565 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:14:45,567 INFO L85 PathProgramCache]: Analyzing trace with hash -181443690, now seen corresponding path program 1 times [2022-10-17 10:14:45,567 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:14:45,567 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [725646028] [2022-10-17 10:14:45,568 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:14:45,568 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:14:45,589 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:14:45,726 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-10-17 10:14:45,733 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:14:45,750 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-10-17 10:14:45,751 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:14:45,755 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:14:45,756 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:14:45,756 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [725646028] [2022-10-17 10:14:45,756 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [725646028] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:14:45,756 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:14:45,757 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-10-17 10:14:45,757 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [643231557] [2022-10-17 10:14:45,757 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:14:45,757 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-10-17 10:14:45,758 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:14:45,758 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-10-17 10:14:45,758 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-10-17 10:14:45,759 INFO L87 Difference]: Start difference. First operand 86 states and 110 transitions. Second operand has 4 states, 4 states have (on average 8.25) internal successors, (33), 3 states have internal predecessors, (33), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-10-17 10:14:45,949 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:14:45,949 INFO L93 Difference]: Finished difference Result 241 states and 309 transitions. [2022-10-17 10:14:45,950 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-10-17 10:14:45,950 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 8.25) internal successors, (33), 3 states have internal predecessors, (33), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 38 [2022-10-17 10:14:45,951 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:14:45,956 INFO L225 Difference]: With dead ends: 241 [2022-10-17 10:14:45,956 INFO L226 Difference]: Without dead ends: 162 [2022-10-17 10:14:45,959 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-10-17 10:14:45,969 INFO L413 NwaCegarLoop]: 95 mSDtfsCounter, 153 mSDsluCounter, 108 mSDsCounter, 0 mSdLazyCounter, 72 mSolverCounterSat, 41 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 157 SdHoareTripleChecker+Valid, 203 SdHoareTripleChecker+Invalid, 113 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 41 IncrementalHoareTripleChecker+Valid, 72 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-10-17 10:14:45,970 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [157 Valid, 203 Invalid, 113 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [41 Valid, 72 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-10-17 10:14:45,972 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 162 states. [2022-10-17 10:14:46,010 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 162 to 156. [2022-10-17 10:14:46,011 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 156 states, 119 states have (on average 1.26890756302521) internal successors, (151), 128 states have internal predecessors, (151), 16 states have call successors, (16), 15 states have call predecessors, (16), 20 states have return successors, (27), 18 states have call predecessors, (27), 16 states have call successors, (27) [2022-10-17 10:14:46,013 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 156 states to 156 states and 194 transitions. [2022-10-17 10:14:46,014 INFO L78 Accepts]: Start accepts. Automaton has 156 states and 194 transitions. Word has length 38 [2022-10-17 10:14:46,015 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:14:46,015 INFO L495 AbstractCegarLoop]: Abstraction has 156 states and 194 transitions. [2022-10-17 10:14:46,017 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 8.25) internal successors, (33), 3 states have internal predecessors, (33), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-10-17 10:14:46,017 INFO L276 IsEmpty]: Start isEmpty. Operand 156 states and 194 transitions. [2022-10-17 10:14:46,024 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2022-10-17 10:14:46,025 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:14:46,025 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:14:46,025 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-10-17 10:14:46,025 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:14:46,027 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:14:46,028 INFO L85 PathProgramCache]: Analyzing trace with hash -91120732, now seen corresponding path program 1 times [2022-10-17 10:14:46,028 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:14:46,028 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1155852718] [2022-10-17 10:14:46,029 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:14:46,029 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:14:46,066 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:14:46,292 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-10-17 10:14:46,296 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:14:46,301 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-17 10:14:46,303 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:14:46,306 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-17 10:14:46,307 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:14:46,309 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:14:46,309 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:14:46,310 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1155852718] [2022-10-17 10:14:46,310 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1155852718] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:14:46,310 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:14:46,310 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2022-10-17 10:14:46,310 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [406051908] [2022-10-17 10:14:46,311 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:14:46,311 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-10-17 10:14:46,311 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:14:46,312 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-10-17 10:14:46,312 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=56, Unknown=0, NotChecked=0, Total=72 [2022-10-17 10:14:46,312 INFO L87 Difference]: Start difference. First operand 156 states and 194 transitions. Second operand has 9 states, 9 states have (on average 4.333333333333333) internal successors, (39), 8 states have internal predecessors, (39), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-10-17 10:14:46,918 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:14:46,918 INFO L93 Difference]: Finished difference Result 544 states and 736 transitions. [2022-10-17 10:14:46,919 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2022-10-17 10:14:46,919 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 4.333333333333333) internal successors, (39), 8 states have internal predecessors, (39), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 46 [2022-10-17 10:14:46,920 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:14:46,929 INFO L225 Difference]: With dead ends: 544 [2022-10-17 10:14:46,929 INFO L226 Difference]: Without dead ends: 395 [2022-10-17 10:14:46,932 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 29 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 77 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=113, Invalid=349, Unknown=0, NotChecked=0, Total=462 [2022-10-17 10:14:46,938 INFO L413 NwaCegarLoop]: 113 mSDtfsCounter, 339 mSDsluCounter, 556 mSDsCounter, 0 mSdLazyCounter, 487 mSolverCounterSat, 100 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 344 SdHoareTripleChecker+Valid, 669 SdHoareTripleChecker+Invalid, 587 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 100 IncrementalHoareTripleChecker+Valid, 487 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-10-17 10:14:46,939 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [344 Valid, 669 Invalid, 587 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [100 Valid, 487 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-10-17 10:14:46,941 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 395 states. [2022-10-17 10:14:47,026 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 395 to 377. [2022-10-17 10:14:47,027 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 377 states, 286 states have (on average 1.2377622377622377) internal successors, (354), 306 states have internal predecessors, (354), 40 states have call successors, (40), 38 states have call predecessors, (40), 50 states have return successors, (90), 46 states have call predecessors, (90), 40 states have call successors, (90) [2022-10-17 10:14:47,032 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 377 states to 377 states and 484 transitions. [2022-10-17 10:14:47,033 INFO L78 Accepts]: Start accepts. Automaton has 377 states and 484 transitions. Word has length 46 [2022-10-17 10:14:47,033 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:14:47,033 INFO L495 AbstractCegarLoop]: Abstraction has 377 states and 484 transitions. [2022-10-17 10:14:47,034 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 4.333333333333333) internal successors, (39), 8 states have internal predecessors, (39), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-10-17 10:14:47,034 INFO L276 IsEmpty]: Start isEmpty. Operand 377 states and 484 transitions. [2022-10-17 10:14:47,037 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 94 [2022-10-17 10:14:47,037 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:14:47,038 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:14:47,038 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-10-17 10:14:47,038 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:14:47,039 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:14:47,039 INFO L85 PathProgramCache]: Analyzing trace with hash 908063002, now seen corresponding path program 1 times [2022-10-17 10:14:47,039 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:14:47,040 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [162160072] [2022-10-17 10:14:47,040 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:14:47,040 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:14:47,078 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:14:47,208 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-10-17 10:14:47,220 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:14:47,227 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-10-17 10:14:47,233 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:14:47,280 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-10-17 10:14:47,284 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:14:47,307 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-17 10:14:47,311 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:14:47,349 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-17 10:14:47,351 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:14:47,357 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2022-10-17 10:14:47,359 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:14:47,361 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 75 [2022-10-17 10:14:47,364 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:14:47,367 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 82 [2022-10-17 10:14:47,369 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:14:47,371 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 14 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2022-10-17 10:14:47,371 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:14:47,371 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [162160072] [2022-10-17 10:14:47,371 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [162160072] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:14:47,372 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:14:47,372 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-10-17 10:14:47,372 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1855923343] [2022-10-17 10:14:47,372 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:14:47,373 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-10-17 10:14:47,373 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:14:47,373 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-10-17 10:14:47,374 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2022-10-17 10:14:47,374 INFO L87 Difference]: Start difference. First operand 377 states and 484 transitions. Second operand has 8 states, 8 states have (on average 8.5) internal successors, (68), 5 states have internal predecessors, (68), 2 states have call successors, (9), 5 states have call predecessors, (9), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-10-17 10:14:47,695 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:14:47,695 INFO L93 Difference]: Finished difference Result 840 states and 1145 transitions. [2022-10-17 10:14:47,696 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-10-17 10:14:47,696 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 8.5) internal successors, (68), 5 states have internal predecessors, (68), 2 states have call successors, (9), 5 states have call predecessors, (9), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) Word has length 93 [2022-10-17 10:14:47,698 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:14:47,702 INFO L225 Difference]: With dead ends: 840 [2022-10-17 10:14:47,702 INFO L226 Difference]: Without dead ends: 470 [2022-10-17 10:14:47,704 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 18 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2022-10-17 10:14:47,706 INFO L413 NwaCegarLoop]: 100 mSDtfsCounter, 109 mSDsluCounter, 301 mSDsCounter, 0 mSdLazyCounter, 334 mSolverCounterSat, 39 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 113 SdHoareTripleChecker+Valid, 401 SdHoareTripleChecker+Invalid, 373 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 39 IncrementalHoareTripleChecker+Valid, 334 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-10-17 10:14:47,707 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [113 Valid, 401 Invalid, 373 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [39 Valid, 334 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-10-17 10:14:47,709 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 470 states. [2022-10-17 10:14:47,761 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 470 to 431. [2022-10-17 10:14:47,763 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 431 states, 330 states have (on average 1.2242424242424241) internal successors, (404), 355 states have internal predecessors, (404), 44 states have call successors, (44), 38 states have call predecessors, (44), 56 states have return successors, (104), 51 states have call predecessors, (104), 44 states have call successors, (104) [2022-10-17 10:14:47,767 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 431 states to 431 states and 552 transitions. [2022-10-17 10:14:47,768 INFO L78 Accepts]: Start accepts. Automaton has 431 states and 552 transitions. Word has length 93 [2022-10-17 10:14:47,768 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:14:47,768 INFO L495 AbstractCegarLoop]: Abstraction has 431 states and 552 transitions. [2022-10-17 10:14:47,769 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 8.5) internal successors, (68), 5 states have internal predecessors, (68), 2 states have call successors, (9), 5 states have call predecessors, (9), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-10-17 10:14:47,769 INFO L276 IsEmpty]: Start isEmpty. Operand 431 states and 552 transitions. [2022-10-17 10:14:47,772 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 86 [2022-10-17 10:14:47,772 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:14:47,773 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:14:47,773 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-10-17 10:14:47,773 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:14:47,774 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:14:47,774 INFO L85 PathProgramCache]: Analyzing trace with hash -1534943524, now seen corresponding path program 1 times [2022-10-17 10:14:47,774 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:14:47,774 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1424437398] [2022-10-17 10:14:47,775 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:14:47,775 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:14:47,800 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:14:47,936 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-10-17 10:14:47,941 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:14:47,968 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-10-17 10:14:47,972 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:14:47,988 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-17 10:14:47,991 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:14:48,027 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-17 10:14:48,029 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:14:48,031 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2022-10-17 10:14:48,033 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:14:48,035 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 74 [2022-10-17 10:14:48,036 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:14:48,037 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 13 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-10-17 10:14:48,038 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:14:48,038 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1424437398] [2022-10-17 10:14:48,038 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1424437398] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:14:48,038 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:14:48,039 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-10-17 10:14:48,039 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1303402798] [2022-10-17 10:14:48,039 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:14:48,040 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-10-17 10:14:48,040 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:14:48,040 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-10-17 10:14:48,040 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2022-10-17 10:14:48,041 INFO L87 Difference]: Start difference. First operand 431 states and 552 transitions. Second operand has 8 states, 8 states have (on average 8.25) internal successors, (66), 6 states have internal predecessors, (66), 2 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 1 states have call predecessors, (6), 2 states have call successors, (6) [2022-10-17 10:14:48,367 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:14:48,368 INFO L93 Difference]: Finished difference Result 808 states and 1073 transitions. [2022-10-17 10:14:48,370 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-10-17 10:14:48,371 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 8.25) internal successors, (66), 6 states have internal predecessors, (66), 2 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 1 states have call predecessors, (6), 2 states have call successors, (6) Word has length 85 [2022-10-17 10:14:48,371 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:14:48,375 INFO L225 Difference]: With dead ends: 808 [2022-10-17 10:14:48,375 INFO L226 Difference]: Without dead ends: 384 [2022-10-17 10:14:48,377 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 27 GetRequests, 17 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=36, Invalid=96, Unknown=0, NotChecked=0, Total=132 [2022-10-17 10:14:48,378 INFO L413 NwaCegarLoop]: 101 mSDtfsCounter, 134 mSDsluCounter, 284 mSDsCounter, 0 mSdLazyCounter, 378 mSolverCounterSat, 40 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 139 SdHoareTripleChecker+Valid, 385 SdHoareTripleChecker+Invalid, 418 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 40 IncrementalHoareTripleChecker+Valid, 378 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-10-17 10:14:48,379 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [139 Valid, 385 Invalid, 418 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [40 Valid, 378 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-10-17 10:14:48,380 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 384 states. [2022-10-17 10:14:48,428 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 384 to 368. [2022-10-17 10:14:48,430 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 368 states, 280 states have (on average 1.2142857142857142) internal successors, (340), 301 states have internal predecessors, (340), 40 states have call successors, (40), 33 states have call predecessors, (40), 47 states have return successors, (86), 44 states have call predecessors, (86), 40 states have call successors, (86) [2022-10-17 10:14:48,435 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 368 states to 368 states and 466 transitions. [2022-10-17 10:14:48,436 INFO L78 Accepts]: Start accepts. Automaton has 368 states and 466 transitions. Word has length 85 [2022-10-17 10:14:48,436 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:14:48,436 INFO L495 AbstractCegarLoop]: Abstraction has 368 states and 466 transitions. [2022-10-17 10:14:48,437 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 8.25) internal successors, (66), 6 states have internal predecessors, (66), 2 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 1 states have call predecessors, (6), 2 states have call successors, (6) [2022-10-17 10:14:48,437 INFO L276 IsEmpty]: Start isEmpty. Operand 368 states and 466 transitions. [2022-10-17 10:14:48,439 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 90 [2022-10-17 10:14:48,439 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:14:48,439 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:14:48,439 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-10-17 10:14:48,440 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:14:48,440 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:14:48,440 INFO L85 PathProgramCache]: Analyzing trace with hash -1438943688, now seen corresponding path program 1 times [2022-10-17 10:14:48,440 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:14:48,441 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [3848870] [2022-10-17 10:14:48,441 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:14:48,441 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:14:48,466 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:14:48,566 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-10-17 10:14:48,567 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:14:48,575 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-10-17 10:14:48,579 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:14:48,595 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-10-17 10:14:48,598 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:14:48,602 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-17 10:14:48,604 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:14:48,608 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-17 10:14:48,610 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:14:48,612 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 71 [2022-10-17 10:14:48,613 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:14:48,615 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2022-10-17 10:14:48,616 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:14:48,620 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 4 proven. 1 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-10-17 10:14:48,621 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:14:48,621 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [3848870] [2022-10-17 10:14:48,621 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [3848870] provided 0 perfect and 1 imperfect interpolant sequences [2022-10-17 10:14:48,621 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1172977937] [2022-10-17 10:14:48,621 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:14:48,622 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-17 10:14:48,622 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_604f0cdd-6c41-4b72-97ad-3ed819f0f7b2/bin/uautomizer-J5u9QxTXDZ/z3 [2022-10-17 10:14:48,623 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_604f0cdd-6c41-4b72-97ad-3ed819f0f7b2/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-10-17 10:14:48,637 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_604f0cdd-6c41-4b72-97ad-3ed819f0f7b2/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-10-17 10:14:48,758 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:14:48,761 INFO L263 TraceCheckSpWp]: Trace formula consists of 453 conjuncts, 8 conjunts are in the unsatisfiable core [2022-10-17 10:14:48,772 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-10-17 10:14:49,021 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 13 proven. 8 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:14:49,021 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-10-17 10:14:49,215 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 13 proven. 4 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-10-17 10:14:49,215 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1172977937] provided 0 perfect and 2 imperfect interpolant sequences [2022-10-17 10:14:49,215 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-10-17 10:14:49,215 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 6, 6] total 12 [2022-10-17 10:14:49,215 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [129383705] [2022-10-17 10:14:49,216 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-10-17 10:14:49,216 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-10-17 10:14:49,216 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:14:49,217 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-10-17 10:14:49,217 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=24, Invalid=108, Unknown=0, NotChecked=0, Total=132 [2022-10-17 10:14:49,217 INFO L87 Difference]: Start difference. First operand 368 states and 466 transitions. Second operand has 12 states, 12 states have (on average 9.666666666666666) internal successors, (116), 9 states have internal predecessors, (116), 3 states have call successors, (18), 6 states have call predecessors, (18), 4 states have return successors, (16), 4 states have call predecessors, (16), 3 states have call successors, (16) [2022-10-17 10:14:50,677 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:14:50,677 INFO L93 Difference]: Finished difference Result 817 states and 1104 transitions. [2022-10-17 10:14:50,678 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 48 states. [2022-10-17 10:14:50,678 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 9.666666666666666) internal successors, (116), 9 states have internal predecessors, (116), 3 states have call successors, (18), 6 states have call predecessors, (18), 4 states have return successors, (16), 4 states have call predecessors, (16), 3 states have call successors, (16) Word has length 89 [2022-10-17 10:14:50,679 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:14:50,682 INFO L225 Difference]: With dead ends: 817 [2022-10-17 10:14:50,682 INFO L226 Difference]: Without dead ends: 504 [2022-10-17 10:14:50,685 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 256 GetRequests, 199 SyntacticMatches, 6 SemanticMatches, 51 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 844 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=481, Invalid=2275, Unknown=0, NotChecked=0, Total=2756 [2022-10-17 10:14:50,688 INFO L413 NwaCegarLoop]: 146 mSDtfsCounter, 805 mSDsluCounter, 592 mSDsCounter, 0 mSdLazyCounter, 1089 mSolverCounterSat, 336 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 812 SdHoareTripleChecker+Valid, 738 SdHoareTripleChecker+Invalid, 1425 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 336 IncrementalHoareTripleChecker+Valid, 1089 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2022-10-17 10:14:50,688 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [812 Valid, 738 Invalid, 1425 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [336 Valid, 1089 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2022-10-17 10:14:50,690 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 504 states. [2022-10-17 10:14:50,737 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 504 to 434. [2022-10-17 10:14:50,738 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 434 states, 328 states have (on average 1.2103658536585367) internal successors, (397), 352 states have internal predecessors, (397), 51 states have call successors, (51), 44 states have call predecessors, (51), 54 states have return successors, (111), 50 states have call predecessors, (111), 51 states have call successors, (111) [2022-10-17 10:14:50,741 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 434 states to 434 states and 559 transitions. [2022-10-17 10:14:50,742 INFO L78 Accepts]: Start accepts. Automaton has 434 states and 559 transitions. Word has length 89 [2022-10-17 10:14:50,743 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:14:50,743 INFO L495 AbstractCegarLoop]: Abstraction has 434 states and 559 transitions. [2022-10-17 10:14:50,743 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 9.666666666666666) internal successors, (116), 9 states have internal predecessors, (116), 3 states have call successors, (18), 6 states have call predecessors, (18), 4 states have return successors, (16), 4 states have call predecessors, (16), 3 states have call successors, (16) [2022-10-17 10:14:50,743 INFO L276 IsEmpty]: Start isEmpty. Operand 434 states and 559 transitions. [2022-10-17 10:14:50,752 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 151 [2022-10-17 10:14:50,752 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:14:50,752 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:14:50,791 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_604f0cdd-6c41-4b72-97ad-3ed819f0f7b2/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-10-17 10:14:50,974 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_604f0cdd-6c41-4b72-97ad-3ed819f0f7b2/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-17 10:14:50,974 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:14:50,975 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:14:50,975 INFO L85 PathProgramCache]: Analyzing trace with hash 1270234994, now seen corresponding path program 1 times [2022-10-17 10:14:50,975 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:14:50,975 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [549755752] [2022-10-17 10:14:50,975 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:14:50,975 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:14:51,021 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:14:51,190 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-10-17 10:14:51,191 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:14:51,197 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-10-17 10:14:51,203 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:14:51,217 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-10-17 10:14:51,222 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:14:51,235 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-17 10:14:51,238 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:14:51,251 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-17 10:14:51,252 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:14:51,255 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2022-10-17 10:14:51,262 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:14:51,370 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2022-10-17 10:14:51,371 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:14:51,374 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-10-17 10:14:51,379 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:14:51,442 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-10-17 10:14:51,443 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:14:51,446 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-17 10:14:51,446 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:14:51,447 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 118 [2022-10-17 10:14:51,449 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:14:51,450 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 125 [2022-10-17 10:14:51,453 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:14:51,456 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-10-17 10:14:51,458 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:14:51,464 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-17 10:14:51,466 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:14:51,468 INFO L134 CoverageAnalysis]: Checked inductivity of 105 backedges. 52 proven. 23 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2022-10-17 10:14:51,468 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:14:51,468 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [549755752] [2022-10-17 10:14:51,469 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [549755752] provided 0 perfect and 1 imperfect interpolant sequences [2022-10-17 10:14:51,469 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1560035297] [2022-10-17 10:14:51,469 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:14:51,469 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-17 10:14:51,470 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_604f0cdd-6c41-4b72-97ad-3ed819f0f7b2/bin/uautomizer-J5u9QxTXDZ/z3 [2022-10-17 10:14:51,474 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_604f0cdd-6c41-4b72-97ad-3ed819f0f7b2/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-10-17 10:14:51,495 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_604f0cdd-6c41-4b72-97ad-3ed819f0f7b2/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-10-17 10:14:51,622 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:14:51,626 INFO L263 TraceCheckSpWp]: Trace formula consists of 606 conjuncts, 11 conjunts are in the unsatisfiable core [2022-10-17 10:14:51,642 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-10-17 10:14:51,899 INFO L134 CoverageAnalysis]: Checked inductivity of 105 backedges. 88 proven. 15 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-10-17 10:14:51,899 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-10-17 10:14:52,207 INFO L134 CoverageAnalysis]: Checked inductivity of 105 backedges. 53 proven. 23 refuted. 0 times theorem prover too weak. 29 trivial. 0 not checked. [2022-10-17 10:14:52,207 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1560035297] provided 0 perfect and 2 imperfect interpolant sequences [2022-10-17 10:14:52,208 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-10-17 10:14:52,208 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 9, 9] total 17 [2022-10-17 10:14:52,208 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [883121809] [2022-10-17 10:14:52,208 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-10-17 10:14:52,209 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 17 states [2022-10-17 10:14:52,209 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:14:52,210 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2022-10-17 10:14:52,210 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=61, Invalid=211, Unknown=0, NotChecked=0, Total=272 [2022-10-17 10:14:52,211 INFO L87 Difference]: Start difference. First operand 434 states and 559 transitions. Second operand has 17 states, 17 states have (on average 8.941176470588236) internal successors, (152), 15 states have internal predecessors, (152), 6 states have call successors, (33), 9 states have call predecessors, (33), 6 states have return successors, (24), 8 states have call predecessors, (24), 6 states have call successors, (24) [2022-10-17 10:14:53,589 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:14:53,589 INFO L93 Difference]: Finished difference Result 1193 states and 1627 transitions. [2022-10-17 10:14:53,590 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 31 states. [2022-10-17 10:14:53,590 INFO L78 Accepts]: Start accepts. Automaton has has 17 states, 17 states have (on average 8.941176470588236) internal successors, (152), 15 states have internal predecessors, (152), 6 states have call successors, (33), 9 states have call predecessors, (33), 6 states have return successors, (24), 8 states have call predecessors, (24), 6 states have call successors, (24) Word has length 150 [2022-10-17 10:14:53,591 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:14:53,597 INFO L225 Difference]: With dead ends: 1193 [2022-10-17 10:14:53,597 INFO L226 Difference]: Without dead ends: 813 [2022-10-17 10:14:53,600 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 370 GetRequests, 327 SyntacticMatches, 6 SemanticMatches, 37 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 312 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=384, Invalid=1098, Unknown=0, NotChecked=0, Total=1482 [2022-10-17 10:14:53,603 INFO L413 NwaCegarLoop]: 215 mSDtfsCounter, 841 mSDsluCounter, 660 mSDsCounter, 0 mSdLazyCounter, 1069 mSolverCounterSat, 451 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 845 SdHoareTripleChecker+Valid, 875 SdHoareTripleChecker+Invalid, 1520 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 451 IncrementalHoareTripleChecker+Valid, 1069 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2022-10-17 10:14:53,603 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [845 Valid, 875 Invalid, 1520 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [451 Valid, 1069 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2022-10-17 10:14:53,605 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 813 states. [2022-10-17 10:14:53,703 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 813 to 710. [2022-10-17 10:14:53,705 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 710 states, 533 states have (on average 1.2026266416510318) internal successors, (641), 565 states have internal predecessors, (641), 83 states have call successors, (83), 76 states have call predecessors, (83), 93 states have return successors, (177), 85 states have call predecessors, (177), 83 states have call successors, (177) [2022-10-17 10:14:53,711 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 710 states to 710 states and 901 transitions. [2022-10-17 10:14:53,711 INFO L78 Accepts]: Start accepts. Automaton has 710 states and 901 transitions. Word has length 150 [2022-10-17 10:14:53,713 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:14:53,713 INFO L495 AbstractCegarLoop]: Abstraction has 710 states and 901 transitions. [2022-10-17 10:14:53,713 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 17 states, 17 states have (on average 8.941176470588236) internal successors, (152), 15 states have internal predecessors, (152), 6 states have call successors, (33), 9 states have call predecessors, (33), 6 states have return successors, (24), 8 states have call predecessors, (24), 6 states have call successors, (24) [2022-10-17 10:14:53,713 INFO L276 IsEmpty]: Start isEmpty. Operand 710 states and 901 transitions. [2022-10-17 10:14:53,718 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 151 [2022-10-17 10:14:53,718 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:14:53,719 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:14:53,757 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_604f0cdd-6c41-4b72-97ad-3ed819f0f7b2/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-10-17 10:14:53,942 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_604f0cdd-6c41-4b72-97ad-3ed819f0f7b2/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-17 10:14:53,942 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:14:53,943 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:14:53,943 INFO L85 PathProgramCache]: Analyzing trace with hash -2070792144, now seen corresponding path program 1 times [2022-10-17 10:14:53,943 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:14:53,943 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1002276001] [2022-10-17 10:14:53,943 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:14:53,943 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:14:53,968 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:14:54,084 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-10-17 10:14:54,085 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:14:54,090 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-10-17 10:14:54,093 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:14:54,100 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-10-17 10:14:54,102 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:14:54,106 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-17 10:14:54,108 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:14:54,111 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-17 10:14:54,112 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:14:54,113 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2022-10-17 10:14:54,117 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:14:54,138 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2022-10-17 10:14:54,139 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:14:54,140 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-10-17 10:14:54,147 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:14:54,171 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-10-17 10:14:54,172 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:14:54,174 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-17 10:14:54,174 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:14:54,175 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 118 [2022-10-17 10:14:54,176 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:14:54,177 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 125 [2022-10-17 10:14:54,180 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:14:54,183 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-10-17 10:14:54,184 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:14:54,188 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-17 10:14:54,189 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:14:54,190 INFO L134 CoverageAnalysis]: Checked inductivity of 105 backedges. 45 proven. 6 refuted. 0 times theorem prover too weak. 54 trivial. 0 not checked. [2022-10-17 10:14:54,191 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:14:54,191 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1002276001] [2022-10-17 10:14:54,191 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1002276001] provided 0 perfect and 1 imperfect interpolant sequences [2022-10-17 10:14:54,191 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [269323425] [2022-10-17 10:14:54,191 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:14:54,191 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-17 10:14:54,192 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_604f0cdd-6c41-4b72-97ad-3ed819f0f7b2/bin/uautomizer-J5u9QxTXDZ/z3 [2022-10-17 10:14:54,194 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_604f0cdd-6c41-4b72-97ad-3ed819f0f7b2/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-10-17 10:14:54,213 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_604f0cdd-6c41-4b72-97ad-3ed819f0f7b2/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-10-17 10:14:54,317 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:14:54,319 INFO L263 TraceCheckSpWp]: Trace formula consists of 607 conjuncts, 5 conjunts are in the unsatisfiable core [2022-10-17 10:14:54,328 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-10-17 10:14:54,349 INFO L134 CoverageAnalysis]: Checked inductivity of 105 backedges. 72 proven. 0 refuted. 0 times theorem prover too weak. 33 trivial. 0 not checked. [2022-10-17 10:14:54,349 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-10-17 10:14:54,350 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [269323425] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:14:54,350 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-10-17 10:14:54,350 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [8] total 8 [2022-10-17 10:14:54,350 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [286360046] [2022-10-17 10:14:54,350 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:14:54,351 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-10-17 10:14:54,351 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:14:54,351 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-10-17 10:14:54,352 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2022-10-17 10:14:54,352 INFO L87 Difference]: Start difference. First operand 710 states and 901 transitions. Second operand has 5 states, 5 states have (on average 20.0) internal successors, (100), 5 states have internal predecessors, (100), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2022-10-17 10:14:54,423 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:14:54,423 INFO L93 Difference]: Finished difference Result 942 states and 1183 transitions. [2022-10-17 10:14:54,423 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-10-17 10:14:54,423 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 20.0) internal successors, (100), 5 states have internal predecessors, (100), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) Word has length 150 [2022-10-17 10:14:54,424 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:14:54,425 INFO L225 Difference]: With dead ends: 942 [2022-10-17 10:14:54,425 INFO L226 Difference]: Without dead ends: 0 [2022-10-17 10:14:54,428 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 187 GetRequests, 179 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=25, Invalid=65, Unknown=0, NotChecked=0, Total=90 [2022-10-17 10:14:54,428 INFO L413 NwaCegarLoop]: 108 mSDtfsCounter, 9 mSDsluCounter, 307 mSDsCounter, 0 mSdLazyCounter, 14 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 9 SdHoareTripleChecker+Valid, 415 SdHoareTripleChecker+Invalid, 17 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 14 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-10-17 10:14:54,429 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [9 Valid, 415 Invalid, 17 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 14 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-10-17 10:14:54,430 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-10-17 10:14:54,430 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-10-17 10:14:54,430 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-10-17 10:14:54,430 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-10-17 10:14:54,431 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 150 [2022-10-17 10:14:54,431 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:14:54,431 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-10-17 10:14:54,431 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 20.0) internal successors, (100), 5 states have internal predecessors, (100), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2022-10-17 10:14:54,431 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-10-17 10:14:54,431 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-10-17 10:14:54,434 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-10-17 10:14:54,473 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_604f0cdd-6c41-4b72-97ad-3ed819f0f7b2/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-10-17 10:14:54,662 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_604f0cdd-6c41-4b72-97ad-3ed819f0f7b2/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-17 10:14:54,664 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-10-17 10:14:57,449 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 278 285) the Hoare annotation is: (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0)) [2022-10-17 10:14:57,449 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 278 285) no Hoare annotation was computed. [2022-10-17 10:14:57,449 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 278 285) no Hoare annotation was computed. [2022-10-17 10:14:57,449 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 168 174) no Hoare annotation was computed. [2022-10-17 10:14:57,452 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 168 174) the Hoare annotation is: true [2022-10-17 10:14:57,452 INFO L899 garLoopResultBuilder]: For program point L946-1(lines 942 953) no Hoare annotation was computed. [2022-10-17 10:14:57,452 INFO L902 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 942 953) the Hoare annotation is: true [2022-10-17 10:14:57,453 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 942 953) no Hoare annotation was computed. [2022-10-17 10:14:57,453 INFO L902 garLoopResultBuilder]: At program point L480(lines 455 484) the Hoare annotation is: true [2022-10-17 10:14:57,453 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 455 484) no Hoare annotation was computed. [2022-10-17 10:14:57,453 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 455 484) the Hoare annotation is: true [2022-10-17 10:14:57,453 INFO L899 garLoopResultBuilder]: For program point L476(line 476) no Hoare annotation was computed. [2022-10-17 10:14:57,454 INFO L899 garLoopResultBuilder]: For program point L469(lines 469 473) no Hoare annotation was computed. [2022-10-17 10:14:57,454 INFO L902 garLoopResultBuilder]: At program point L469-1(lines 469 473) the Hoare annotation is: true [2022-10-17 10:14:57,454 INFO L899 garLoopResultBuilder]: For program point L466(line 466) no Hoare annotation was computed. [2022-10-17 10:14:57,454 INFO L902 garLoopResultBuilder]: At program point L465-2(lines 465 479) the Hoare annotation is: true [2022-10-17 10:14:57,454 INFO L902 garLoopResultBuilder]: At program point L461(line 461) the Hoare annotation is: true [2022-10-17 10:14:57,454 INFO L899 garLoopResultBuilder]: For program point L461-1(line 461) no Hoare annotation was computed. [2022-10-17 10:14:57,454 INFO L899 garLoopResultBuilder]: For program point L155-1(lines 155 161) no Hoare annotation was computed. [2022-10-17 10:14:57,455 INFO L895 garLoopResultBuilder]: At program point L242(line 242) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|)) .cse0) (or (< |old(~waterLevel~0)| 2) .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)))))) [2022-10-17 10:14:57,455 INFO L895 garLoopResultBuilder]: At program point L238(line 238) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|)) .cse0) (or (< |old(~waterLevel~0)| 2) .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)))))) [2022-10-17 10:14:57,455 INFO L895 garLoopResultBuilder]: At program point L234(line 234) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|)) .cse0) (or (< |old(~waterLevel~0)| 2) .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)))))) [2022-10-17 10:14:57,455 INFO L899 garLoopResultBuilder]: For program point L234-1(line 234) no Hoare annotation was computed. [2022-10-17 10:14:57,455 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 144 167) no Hoare annotation was computed. [2022-10-17 10:14:57,457 INFO L895 garLoopResultBuilder]: At program point L247(line 247) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= 0 ~systemActive~0))) (and (or (< |old(~waterLevel~0)| 2) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) (and .cse0 (= |old(~waterLevel~0)| ~waterLevel~0)) (not (<= 1 |old(~waterLevel~0)|)) .cse1))) [2022-10-17 10:14:57,457 INFO L895 garLoopResultBuilder]: At program point L247-1(lines 228 252) the Hoare annotation is: (let ((.cse1 (< |old(~waterLevel~0)| 2)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= ~pumpRunning~0 0)) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (= |old(~waterLevel~0)| ~waterLevel~0) .cse2) (let ((.cse4 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)))) (or (and .cse3 .cse4) .cse1 (and (<= 2 ~waterLevel~0) .cse4) .cse2)) (or .cse0 (not (= |old(~waterLevel~0)| 1)) (and .cse3 (= ~waterLevel~0 1)) .cse2))) [2022-10-17 10:14:57,458 INFO L899 garLoopResultBuilder]: For program point L148-1(lines 147 166) no Hoare annotation was computed. [2022-10-17 10:14:57,458 INFO L895 garLoopResultBuilder]: At program point L991(lines 986 994) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (< |old(~waterLevel~0)| 2)) (.cse3 (= ~pumpRunning~0 0)) (.cse4 (<= 1 |timeShift_getWaterLevel_#res#1|)) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (= |old(~waterLevel~0)| ~waterLevel~0) .cse2) (or .cse0 (not (= |old(~waterLevel~0)| 1)) (and .cse3 .cse4 (= ~waterLevel~0 1)) .cse2) (let ((.cse5 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)))) (or .cse1 (and (<= 2 ~waterLevel~0) .cse5 .cse4) (and .cse3 .cse5 .cse4) .cse2)))) [2022-10-17 10:14:57,459 INFO L899 garLoopResultBuilder]: For program point L54(line 54) no Hoare annotation was computed. [2022-10-17 10:14:57,459 INFO L895 garLoopResultBuilder]: At program point L302(lines 297 305) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|)) .cse0) (or (< |old(~waterLevel~0)| 2) .cse0))) [2022-10-17 10:14:57,459 INFO L899 garLoopResultBuilder]: For program point L236(lines 236 244) no Hoare annotation was computed. [2022-10-17 10:14:57,459 INFO L899 garLoopResultBuilder]: For program point L232(lines 232 249) no Hoare annotation was computed. [2022-10-17 10:14:57,459 INFO L899 garLoopResultBuilder]: For program point L922(lines 922 926) no Hoare annotation was computed. [2022-10-17 10:14:57,459 INFO L895 garLoopResultBuilder]: At program point L922-2(lines 918 929) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|)) .cse0) (or (< |old(~waterLevel~0)| 2) .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)))))) [2022-10-17 10:14:57,459 INFO L895 garLoopResultBuilder]: At program point L55(lines 50 57) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|)) .cse0) (or (< |old(~waterLevel~0)| 2) .cse0))) [2022-10-17 10:14:57,460 INFO L899 garLoopResultBuilder]: For program point L402(lines 402 408) no Hoare annotation was computed. [2022-10-17 10:14:57,460 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 144 167) the Hoare annotation is: (let ((.cse0 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse1 (= 0 ~systemActive~0))) (and (or (< |old(~waterLevel~0)| 2) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) .cse0) (not (<= 1 |old(~waterLevel~0)|)) .cse1))) [2022-10-17 10:14:57,460 INFO L899 garLoopResultBuilder]: For program point L398(lines 398 411) no Hoare annotation was computed. [2022-10-17 10:14:57,460 INFO L895 garLoopResultBuilder]: At program point L398-1(lines 390 414) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (<= 1 |timeShift___utac_acc__Specification4_spec__1_~tmp~7#1|)) (.cse4 (<= 1 |timeShift_getWaterLevel_#res#1|)) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (= |old(~waterLevel~0)| ~waterLevel~0) .cse1 (<= |old(~waterLevel~0)| 1)) (or .cse0 (not (= |old(~waterLevel~0)| 1)) (and .cse2 .cse3 .cse4 (= ~waterLevel~0 1)) .cse1) (let ((.cse5 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)))) (or (and (<= 2 ~waterLevel~0) .cse3 .cse5 .cse4) (< |old(~waterLevel~0)| 2) (and .cse2 .cse3 .cse5 .cse4) .cse1)))) [2022-10-17 10:14:57,460 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 144 167) no Hoare annotation was computed. [2022-10-17 10:14:57,461 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 54) no Hoare annotation was computed. [2022-10-17 10:14:57,461 INFO L895 garLoopResultBuilder]: At program point L122(lines 73 123) the Hoare annotation is: false [2022-10-17 10:14:57,461 INFO L902 garLoopResultBuilder]: At program point L523(lines 516 525) the Hoare annotation is: true [2022-10-17 10:14:57,461 INFO L895 garLoopResultBuilder]: At program point L449(lines 444 452) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-10-17 10:14:57,461 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-10-17 10:14:57,461 INFO L899 garLoopResultBuilder]: For program point L94(lines 94 100) no Hoare annotation was computed. [2022-10-17 10:14:57,462 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-10-17 10:14:57,462 INFO L899 garLoopResultBuilder]: For program point L94-1(lines 94 100) no Hoare annotation was computed. [2022-10-17 10:14:57,462 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-10-17 10:14:57,463 INFO L895 garLoopResultBuilder]: At program point L441(lines 437 443) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-10-17 10:14:57,463 INFO L899 garLoopResultBuilder]: For program point L536(lines 536 543) no Hoare annotation was computed. [2022-10-17 10:14:57,463 INFO L895 garLoopResultBuilder]: At program point L119(lines 74 121) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (not (= 0 ~systemActive~0)))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 (= ~waterLevel~0 1) (= ~waterLevel~0 |ULTIMATE.start_main_~tmp~8#1|) .cse2) (and .cse0 (<= 2 ~waterLevel~0) (= |ULTIMATE.start_main_~tmp~8#1| 1) .cse1 .cse2))) [2022-10-17 10:14:57,463 INFO L895 garLoopResultBuilder]: At program point L86(line 86) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (not (= 0 ~systemActive~0)))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 (= ~waterLevel~0 1) (= ~waterLevel~0 |ULTIMATE.start_main_~tmp~8#1|) .cse2) (and .cse0 (<= 2 ~waterLevel~0) (= |ULTIMATE.start_main_~tmp~8#1| 1) .cse1 .cse2))) [2022-10-17 10:14:57,463 INFO L899 garLoopResultBuilder]: For program point L536-2(lines 536 543) no Hoare annotation was computed. [2022-10-17 10:14:57,464 INFO L902 garLoopResultBuilder]: At program point L545(lines 526 548) the Hoare annotation is: true [2022-10-17 10:14:57,464 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-10-17 10:14:57,464 INFO L895 garLoopResultBuilder]: At program point L434(lines 430 436) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-10-17 10:14:57,464 INFO L899 garLoopResultBuilder]: For program point L112(lines 112 116) no Hoare annotation was computed. [2022-10-17 10:14:57,464 INFO L895 garLoopResultBuilder]: At program point L112-2(lines 104 117) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (not (= 0 ~systemActive~0)))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 (= ~waterLevel~0 1) (= ~waterLevel~0 |ULTIMATE.start_main_~tmp~8#1|) .cse2) (and .cse0 (<= 2 ~waterLevel~0) (= |ULTIMATE.start_main_~tmp~8#1| 1) .cse1 .cse2))) [2022-10-17 10:14:57,464 INFO L899 garLoopResultBuilder]: For program point L75(lines 74 121) no Hoare annotation was computed. [2022-10-17 10:14:57,464 INFO L899 garLoopResultBuilder]: For program point L104(lines 104 117) no Hoare annotation was computed. [2022-10-17 10:14:57,465 INFO L895 garLoopResultBuilder]: At program point L513(lines 509 515) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (= ~waterLevel~0 |ULTIMATE.start_main_~tmp~8#1|) (not (= 0 ~systemActive~0))) [2022-10-17 10:14:57,465 INFO L895 garLoopResultBuilder]: At program point L385(lines 380 387) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (not (= 0 ~systemActive~0)))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 (= ~waterLevel~0 1) (= ~waterLevel~0 |ULTIMATE.start_main_~tmp~8#1|) .cse2) (and .cse0 (<= 2 ~waterLevel~0) (= |ULTIMATE.start_main_~tmp~8#1| 1) .cse1 .cse2))) [2022-10-17 10:14:57,465 INFO L895 garLoopResultBuilder]: At program point L96(line 96) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (not (= 0 ~systemActive~0)))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 (= ~waterLevel~0 1) (= ~waterLevel~0 |ULTIMATE.start_main_~tmp~8#1|) .cse2) (and .cse0 (<= 2 ~waterLevel~0) (= |ULTIMATE.start_main_~tmp~8#1| 1) .cse1 .cse2))) [2022-10-17 10:14:57,465 INFO L902 garLoopResultBuilder]: At program point L125(lines 64 129) the Hoare annotation is: true [2022-10-17 10:14:57,465 INFO L899 garLoopResultBuilder]: For program point L84(lines 84 90) no Hoare annotation was computed. [2022-10-17 10:14:57,466 INFO L899 garLoopResultBuilder]: For program point L84-1(lines 84 90) no Hoare annotation was computed. [2022-10-17 10:14:57,466 INFO L899 garLoopResultBuilder]: For program point L76(lines 76 80) no Hoare annotation was computed. [2022-10-17 10:14:57,466 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 176 200) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= 0 ~systemActive~0))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2) (or .cse0 .cse1 (< ~waterLevel~0 2) .cse2))) [2022-10-17 10:14:57,466 INFO L899 garLoopResultBuilder]: For program point L351(lines 351 355) no Hoare annotation was computed. [2022-10-17 10:14:57,467 INFO L895 garLoopResultBuilder]: At program point L190(line 190) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |processEnvironment__wrappee__highWaterSensor_~tmp~1#1| 0))) (or (not (= |old(~pumpRunning~0)| 0)) (and .cse0 (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~5#1| 0)) (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) .cse1) (not (<= 1 ~waterLevel~0)) (and .cse0 (<= 2 ~waterLevel~0) .cse1) (= 0 ~systemActive~0))) [2022-10-17 10:14:57,468 INFO L899 garLoopResultBuilder]: For program point L351-2(lines 351 355) no Hoare annotation was computed. [2022-10-17 10:14:57,468 INFO L899 garLoopResultBuilder]: For program point L184(lines 184 192) no Hoare annotation was computed. [2022-10-17 10:14:57,468 INFO L899 garLoopResultBuilder]: For program point L180(lines 180 197) no Hoare annotation was computed. [2022-10-17 10:14:57,468 INFO L895 garLoopResultBuilder]: At program point L1004(lines 995 1008) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~waterLevel~0)) (and .cse0 (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0))) (and .cse0 (<= 2 ~waterLevel~0)) (= 0 ~systemActive~0))) [2022-10-17 10:14:57,468 INFO L895 garLoopResultBuilder]: At program point L195(line 195) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0)) [2022-10-17 10:14:57,468 INFO L899 garLoopResultBuilder]: For program point L195-1(lines 176 200) no Hoare annotation was computed. [2022-10-17 10:14:57,469 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 176 200) no Hoare annotation was computed. [2022-10-17 10:14:57,469 INFO L899 garLoopResultBuilder]: For program point L268(lines 268 274) no Hoare annotation was computed. [2022-10-17 10:14:57,469 INFO L895 garLoopResultBuilder]: At program point L266(line 266) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (= ~pumpRunning~0 0) (< ~waterLevel~0 2) .cse1) (or (not (= ~waterLevel~0 1)) .cse0 .cse1))) [2022-10-17 10:14:57,469 INFO L895 garLoopResultBuilder]: At program point L268-2(lines 261 277) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~waterLevel~0)) (<= 2 ~waterLevel~0) (= 0 ~systemActive~0)) [2022-10-17 10:14:57,469 INFO L899 garLoopResultBuilder]: For program point L266-1(line 266) no Hoare annotation was computed. [2022-10-17 10:14:57,469 INFO L899 garLoopResultBuilder]: For program point L999(lines 999 1005) no Hoare annotation was computed. [2022-10-17 10:14:57,469 INFO L895 garLoopResultBuilder]: At program point L357(lines 342 360) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= 0 ~systemActive~0))) (and (or (not (= ~waterLevel~0 1)) .cse0 (and .cse1 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~5#1| 0)) (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)) .cse2) (or .cse0 .cse1 (< ~waterLevel~0 2) .cse2))) [2022-10-17 10:14:57,469 INFO L895 garLoopResultBuilder]: At program point L258(lines 253 260) the Hoare annotation is: (or (not (= ~waterLevel~0 1)) (not (= |old(~pumpRunning~0)| 0)) (= 0 ~systemActive~0)) [2022-10-17 10:14:57,470 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 930 941) no Hoare annotation was computed. [2022-10-17 10:14:57,470 INFO L899 garLoopResultBuilder]: For program point L934-1(lines 930 941) no Hoare annotation was computed. [2022-10-17 10:14:57,470 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 930 941) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= ~pumpRunning~0 0)) (not (= |old(~waterLevel~0)| 1)) .cse0 (= ~waterLevel~0 1)) (or (= |old(~waterLevel~0)| ~waterLevel~0) .cse0 (not (<= 2 |old(~waterLevel~0)|))))) [2022-10-17 10:14:57,470 INFO L895 garLoopResultBuilder]: At program point L221(line 221) the Hoare annotation is: (or (not (<= 1 ~waterLevel~0)) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0)) (= 0 ~systemActive~0)) [2022-10-17 10:14:57,471 INFO L899 garLoopResultBuilder]: For program point L221-1(lines 202 226) no Hoare annotation was computed. [2022-10-17 10:14:57,471 INFO L895 garLoopResultBuilder]: At program point L376(lines 361 379) the Hoare annotation is: (let ((.cse0 (not (<= 1 ~waterLevel~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp___0~2#1|) (<= 1 |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_#res#1|) (= |processEnvironment__wrappee__methaneQuery_isLowWaterSensorDry_#res#1| 0) (= |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp~6#1| 0)) .cse0 .cse1))) [2022-10-17 10:14:57,471 INFO L895 garLoopResultBuilder]: At program point L1014(lines 1009 1017) the Hoare annotation is: (let ((.cse0 (not (<= 1 ~waterLevel~0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |processEnvironment__wrappee__methaneQuery_isLowWaterSensorDry_#res#1| 0)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-10-17 10:14:57,471 INFO L899 garLoopResultBuilder]: For program point L370(lines 370 374) no Hoare annotation was computed. [2022-10-17 10:14:57,471 INFO L899 garLoopResultBuilder]: For program point L370-2(lines 370 374) no Hoare annotation was computed. [2022-10-17 10:14:57,471 INFO L895 garLoopResultBuilder]: At program point L216(line 216) the Hoare annotation is: (or (not (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0)) [2022-10-17 10:14:57,471 INFO L895 garLoopResultBuilder]: At program point L212(line 212) the Hoare annotation is: (let ((.cse0 (not (<= 1 ~waterLevel~0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp___0~2#1|) (<= 1 |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_#res#1|) (= |processEnvironment__wrappee__methaneQuery_isLowWaterSensorDry_#res#1| 0) (<= 1 |processEnvironment__wrappee__methaneQuery_~tmp~2#1|) (= |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp~6#1| 0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-10-17 10:14:57,472 INFO L899 garLoopResultBuilder]: For program point L210(lines 210 218) no Hoare annotation was computed. [2022-10-17 10:14:57,472 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 202 226) the Hoare annotation is: (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0)) [2022-10-17 10:14:57,472 INFO L899 garLoopResultBuilder]: For program point L206(lines 206 223) no Hoare annotation was computed. [2022-10-17 10:14:57,472 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 202 226) no Hoare annotation was computed. [2022-10-17 10:14:57,472 INFO L902 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 286 296) the Hoare annotation is: true [2022-10-17 10:14:57,472 INFO L902 garLoopResultBuilder]: At program point L959(lines 954 962) the Hoare annotation is: true [2022-10-17 10:14:57,473 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 286 296) no Hoare annotation was computed. [2022-10-17 10:14:57,473 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 286 296) no Hoare annotation was computed. [2022-10-17 10:14:57,476 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:14:57,478 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-10-17 10:14:57,519 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 17.10 10:14:57 BoogieIcfgContainer [2022-10-17 10:14:57,520 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-10-17 10:14:57,520 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-10-17 10:14:57,520 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-10-17 10:14:57,520 INFO L275 PluginConnector]: Witness Printer initialized [2022-10-17 10:14:57,521 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.10 10:14:44" (3/4) ... [2022-10-17 10:14:57,524 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-10-17 10:14:57,532 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-10-17 10:14:57,532 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-10-17 10:14:57,532 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-10-17 10:14:57,533 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-10-17 10:14:57,533 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-10-17 10:14:57,533 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-10-17 10:14:57,533 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-10-17 10:14:57,533 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2022-10-17 10:14:57,534 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2022-10-17 10:14:57,549 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 54 nodes and edges [2022-10-17 10:14:57,550 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-10-17 10:14:57,551 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-10-17 10:14:57,551 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-10-17 10:14:57,552 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-10-17 10:14:57,553 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-10-17 10:14:57,553 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-10-17 10:14:57,580 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((pumpRunning == 0 && \result == 1) && waterLevel == 1) && !(0 == systemActive) [2022-10-17 10:14:57,580 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && \result == 1) && waterLevel == 1) && waterLevel == tmp) && !(0 == systemActive) [2022-10-17 10:14:57,581 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && \result == 1) && splverifierCounter == 0) && waterLevel == 1) && waterLevel == tmp) && !(0 == systemActive)) || ((((\result == 1 && 2 <= waterLevel) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) [2022-10-17 10:14:57,582 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || 0 == systemActive) && ((\old(waterLevel) < 2 || 0 == systemActive) || (pumpRunning == \old(pumpRunning) && \old(waterLevel) <= waterLevel + 1)) [2022-10-17 10:14:57,583 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || \old(waterLevel) < 2) || \old(waterLevel) == waterLevel) || 0 == systemActive) && ((((pumpRunning == 0 && \old(waterLevel) <= waterLevel + 1) || \old(waterLevel) < 2) || (2 <= waterLevel && \old(waterLevel) <= waterLevel + 1)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (pumpRunning == 0 && waterLevel == 1)) || 0 == systemActive) [2022-10-17 10:14:57,584 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && \result == 1) && splverifierCounter == 0) && waterLevel == 1) && waterLevel == tmp) && !(0 == systemActive)) || ((((\result == 1 && 2 <= waterLevel) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) [2022-10-17 10:14:57,585 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || \old(waterLevel) < 2) || \old(waterLevel) == waterLevel) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || ((pumpRunning == 0 && 1 <= \result) && waterLevel == 1)) || 0 == systemActive)) && (((\old(waterLevel) < 2 || ((2 <= waterLevel && \old(waterLevel) <= waterLevel + 1) && 1 <= \result)) || ((pumpRunning == 0 && \old(waterLevel) <= waterLevel + 1) && 1 <= \result)) || 0 == systemActive) [2022-10-17 10:14:57,585 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || \old(waterLevel) == waterLevel) || 0 == systemActive) || \old(waterLevel) <= 1) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (((pumpRunning == 0 && 1 <= tmp) && 1 <= \result) && waterLevel == 1)) || 0 == systemActive)) && ((((((2 <= waterLevel && 1 <= tmp) && \old(waterLevel) <= waterLevel + 1) && 1 <= \result) || \old(waterLevel) < 2) || (((pumpRunning == 0 && 1 <= tmp) && \old(waterLevel) <= waterLevel + 1) && 1 <= \result)) || 0 == systemActive) [2022-10-17 10:14:57,586 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(1 <= waterLevel) || (pumpRunning == \old(pumpRunning) && \result == 0)) || 0 == systemActive) && ((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 0 == systemActive) [2022-10-17 10:14:57,586 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || 0 == systemActive) && (\old(waterLevel) < 2 || 0 == systemActive) [2022-10-17 10:14:57,586 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 2 <= waterLevel) || 0 == systemActive [2022-10-17 10:14:57,587 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || (pumpRunning == 0 && !(\result == 0))) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive [2022-10-17 10:14:57,587 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || 0 == systemActive [2022-10-17 10:14:57,587 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 0 == systemActive) && ((((((pumpRunning == \old(pumpRunning) && 1 <= tmp___0) && 1 <= \result) && \result == 0) && tmp == 0) || !(1 <= waterLevel)) || 0 == systemActive) [2022-10-17 10:14:57,590 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || 0 == systemActive) && (\old(waterLevel) < 2 || 0 == systemActive) [2022-10-17 10:14:57,591 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || ((((pumpRunning == 0 && tmp___0 == 0) && !(tmp == 0)) && !(\result == 0)) && \result == 0)) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || waterLevel < 2) || 0 == systemActive) [2022-10-17 10:14:57,646 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_604f0cdd-6c41-4b72-97ad-3ed819f0f7b2/bin/uautomizer-J5u9QxTXDZ/witness.graphml [2022-10-17 10:14:57,646 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-10-17 10:14:57,647 INFO L158 Benchmark]: Toolchain (without parser) took 14471.07ms. Allocated memory was 117.4MB in the beginning and 207.6MB in the end (delta: 90.2MB). Free memory was 86.5MB in the beginning and 111.4MB in the end (delta: -24.9MB). Peak memory consumption was 65.5MB. Max. memory is 16.1GB. [2022-10-17 10:14:57,647 INFO L158 Benchmark]: CDTParser took 0.29ms. Allocated memory is still 117.4MB. Free memory was 71.0MB in the beginning and 70.8MB in the end (delta: 125.9kB). There was no memory consumed. Max. memory is 16.1GB. [2022-10-17 10:14:57,647 INFO L158 Benchmark]: CACSL2BoogieTranslator took 468.57ms. Allocated memory is still 117.4MB. Free memory was 86.5MB in the beginning and 81.2MB in the end (delta: 5.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2022-10-17 10:14:57,648 INFO L158 Benchmark]: Boogie Procedure Inliner took 56.52ms. Allocated memory is still 117.4MB. Free memory was 81.2MB in the beginning and 78.7MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-10-17 10:14:57,648 INFO L158 Benchmark]: Boogie Preprocessor took 32.11ms. Allocated memory is still 117.4MB. Free memory was 78.7MB in the beginning and 77.0MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-10-17 10:14:57,649 INFO L158 Benchmark]: RCFGBuilder took 707.46ms. Allocated memory is still 117.4MB. Free memory was 77.0MB in the beginning and 57.0MB in the end (delta: 20.0MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. [2022-10-17 10:14:57,649 INFO L158 Benchmark]: TraceAbstraction took 13061.93ms. Allocated memory was 117.4MB in the beginning and 207.6MB in the end (delta: 90.2MB). Free memory was 56.1MB in the beginning and 117.7MB in the end (delta: -61.7MB). Peak memory consumption was 70.5MB. Max. memory is 16.1GB. [2022-10-17 10:14:57,650 INFO L158 Benchmark]: Witness Printer took 125.91ms. Allocated memory is still 207.6MB. Free memory was 117.7MB in the beginning and 111.4MB in the end (delta: 6.4MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-10-17 10:14:57,653 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.29ms. Allocated memory is still 117.4MB. Free memory was 71.0MB in the beginning and 70.8MB in the end (delta: 125.9kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 468.57ms. Allocated memory is still 117.4MB. Free memory was 86.5MB in the beginning and 81.2MB in the end (delta: 5.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 56.52ms. Allocated memory is still 117.4MB. Free memory was 81.2MB in the beginning and 78.7MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 32.11ms. Allocated memory is still 117.4MB. Free memory was 78.7MB in the beginning and 77.0MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 707.46ms. Allocated memory is still 117.4MB. Free memory was 77.0MB in the beginning and 57.0MB in the end (delta: 20.0MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. * TraceAbstraction took 13061.93ms. Allocated memory was 117.4MB in the beginning and 207.6MB in the end (delta: 90.2MB). Free memory was 56.1MB in the beginning and 117.7MB in the end (delta: -61.7MB). Peak memory consumption was 70.5MB. Max. memory is 16.1GB. * Witness Printer took 125.91ms. Allocated memory is still 207.6MB. Free memory was 117.7MB in the beginning and 111.4MB in the end (delta: 6.4MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 54]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 104 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 12.9s, OverallIterations: 10, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 4.7s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 2.8s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2571 SdHoareTripleChecker+Valid, 2.8s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2539 mSDsluCounter, 4301 SdHoareTripleChecker+Invalid, 2.3s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3077 mSDsCounter, 1019 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 3453 IncrementalHoareTripleChecker+Invalid, 4472 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1019 mSolverCounterUnsat, 1224 mSDtfsCounter, 3453 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 920 GetRequests, 763 SyntacticMatches, 12 SemanticMatches, 145 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1259 ImplicationChecksByTransitivity, 1.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=710occurred in iteration=9, InterpolantAutomatonStates: 136, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.5s AutomataMinimizationTime, 10 MinimizatonAttempts, 252 StatesRemovedByMinimization, 6 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 49 LocationsWithAnnotation, 1422 PreInvPairs, 1536 NumberOfFragments, 1066 HoareAnnotationTreeSize, 1422 FomulaSimplifications, 1427 FormulaSimplificationTreeSizeReduction, 0.3s HoareSimplificationTime, 49 FomulaSimplificationsInter, 7307 FormulaSimplificationTreeSizeReductionInter, 2.4s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 3.2s InterpolantComputationTime, 1104 NumberOfCodeBlocks, 1104 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 1328 ConstructedInterpolants, 0 QuantifiedInterpolants, 2372 SizeOfPredicates, 10 NumberOfNonLiveVariables, 1666 ConjunctsInSsa, 24 ConjunctsInUnsatCore, 15 InterpolantComputations, 8 PerfectInterpolantSequences, 554/634 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 444]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && \result == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 253]: Loop Invariant Derived loop invariant: (!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || 0 == systemActive - InvariantResult [Line: 228]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || \old(waterLevel) < 2) || \old(waterLevel) == waterLevel) || 0 == systemActive) && ((((pumpRunning == 0 && \old(waterLevel) <= waterLevel + 1) || \old(waterLevel) < 2) || (2 <= waterLevel && \old(waterLevel) <= waterLevel + 1)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (pumpRunning == 0 && waterLevel == 1)) || 0 == systemActive) - InvariantResult [Line: 918]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || 0 == systemActive) && ((\old(waterLevel) < 2 || 0 == systemActive) || (pumpRunning == \old(pumpRunning) && \old(waterLevel) <= waterLevel + 1)) - InvariantResult [Line: 361]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 0 == systemActive) && ((((((pumpRunning == \old(pumpRunning) && 1 <= tmp___0) && 1 <= \result) && \result == 0) && tmp == 0) || !(1 <= waterLevel)) || 0 == systemActive) - InvariantResult [Line: 390]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || \old(waterLevel) == waterLevel) || 0 == systemActive) || \old(waterLevel) <= 1) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (((pumpRunning == 0 && 1 <= tmp) && 1 <= \result) && waterLevel == 1)) || 0 == systemActive)) && ((((((2 <= waterLevel && 1 <= tmp) && \old(waterLevel) <= waterLevel + 1) && 1 <= \result) || \old(waterLevel) < 2) || (((pumpRunning == 0 && 1 <= tmp) && \old(waterLevel) <= waterLevel + 1) && 1 <= \result)) || 0 == systemActive) - InvariantResult [Line: 516]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 380]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && \result == 1) && splverifierCounter == 0) && waterLevel == 1) && waterLevel == tmp) && !(0 == systemActive)) || ((((\result == 1 && 2 <= waterLevel) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) - InvariantResult [Line: 1009]: Loop Invariant Derived loop invariant: ((!(1 <= waterLevel) || (pumpRunning == \old(pumpRunning) && \result == 0)) || 0 == systemActive) && ((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 0 == systemActive) - InvariantResult [Line: 261]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 2 <= waterLevel) || 0 == systemActive - InvariantResult [Line: 954]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 430]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 73]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 995]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || (pumpRunning == 0 && !(\result == 0))) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive - InvariantResult [Line: 455]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 74]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && \result == 1) && splverifierCounter == 0) && waterLevel == 1) && waterLevel == tmp) && !(0 == systemActive)) || ((((\result == 1 && 2 <= waterLevel) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) - InvariantResult [Line: 342]: Loop Invariant Derived loop invariant: (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || ((((pumpRunning == 0 && tmp___0 == 0) && !(tmp == 0)) && !(\result == 0)) && \result == 0)) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || waterLevel < 2) || 0 == systemActive) - InvariantResult [Line: 64]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 526]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 437]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 986]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || \old(waterLevel) < 2) || \old(waterLevel) == waterLevel) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || ((pumpRunning == 0 && 1 <= \result) && waterLevel == 1)) || 0 == systemActive)) && (((\old(waterLevel) < 2 || ((2 <= waterLevel && \old(waterLevel) <= waterLevel + 1) && 1 <= \result)) || ((pumpRunning == 0 && \old(waterLevel) <= waterLevel + 1) && 1 <= \result)) || 0 == systemActive) - InvariantResult [Line: 465]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 509]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && \result == 1) && waterLevel == 1) && waterLevel == tmp) && !(0 == systemActive) - InvariantResult [Line: 50]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || 0 == systemActive) && (\old(waterLevel) < 2 || 0 == systemActive) - InvariantResult [Line: 297]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || 0 == systemActive) && (\old(waterLevel) < 2 || 0 == systemActive) RESULT: Ultimate proved your program to be correct! [2022-10-17 10:14:57,737 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_604f0cdd-6c41-4b72-97ad-3ed819f0f7b2/bin/uautomizer-J5u9QxTXDZ/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE